NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS03997871] allow MobileLog exec logcat -L" into alps-trunk-p0.basic

Browse Source 
Change-Id: I366928a1a654959932a1bc39a77530f3f5c7a8ce
MTK-Commit-Id: 9d2d735377baa0a913c902f58108a7af5c10e6a3
This commit is contained in:
Larry Liang 2020-01-18 10:04:06 +08:00 committed by Gerrit Code Review
commit e2b7fd0b00
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
plat_private/dumpstate.te
View File

@ -49,3 +49,9 @@ allow dumpstate sysfs_vibrator:file write;
# Purpose : Allow dumpstate self to sys_nice
allow dumpstate self:capability sys_nice;
# Date: W1826
# Purpose : mobile_log_d exec 'logcat -L' via dumpstate
allow dumpstate mobile_log_d:fd use;
allow dumpstate mobile_log_d:fifo_file write;
allow dumpstate mobile_log_d:unix_stream_socket { read write };

6
plat_private/mobile_log_d.te
View File

@ -32,6 +32,12 @@ allow mobile_log_d system_file:file execute_no_trans;
#shell command
allow mobile_log_d shell_exec:file rx_file_perms;
# execute logcat command
allow mobile_log_d logcat_exec:file rx_file_perms;
# execute 'logcat -L' via dumpstate
domain_auto_trans(mobile_log_d, logcat_exec, dumpstate)
#general storage access
allow mobile_log_d storage_file:dir create_dir_perms;
allow mobile_log_d storage_file:file create_file_perms;